$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/595c1e08-7b05-454b-9fe5-752047a140eb.roa File: 595c1e08-7b05-454b-9fe5-752047a140eb.roa (raw, json) Hash identifier: piZ1hLUjQ6/knm0ocdSAbXcb8nlHmmS1uMf1/t9Vdws= Subject key identifier: 02:3E:59:54:9D:DA:99:6C:FA:93:AB:FD:A3:E5:66:D3:A2:DB:FC:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DA3829979F094DD4F8654085CFCF616BFA531A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/595c1e08-7b05-454b-9fe5-752047a140eb.roa Signing time: Fri 19 Sep 2025 00:10:20 +0000 ROA not before: Fri 19 Sep 2025 00:10:20 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:82:99:79:f0:94:dd:4f:86:54:08:5c:fc:f6:16:bf:a5:31:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:10:20 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=62ebd6e02186dc8c90abd9d4010726db2c9cc2009294febad17745c8be8b1ea1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:55:8b:bb:18:ec:33:ed:fb:f8:d2:ae:df: 91:83:a1:97:47:4d:29:f4:86:e1:6e:f3:9c:99:f8: f1:13:05:a5:8d:74:25:9a:cb:94:da:c2:71:3f:82: a1:cf:3d:d1:fb:01:29:78:5e:68:81:79:13:db:04: f2:28:1d:51:ba:d4:85:10:66:9b:80:dd:bb:c2:1f: d5:e9:1a:0e:7f:98:f4:f3:08:87:40:f0:42:b5:22: 00:e0:72:70:05:3f:0c:1a:24:38:b5:b0:16:d4:77: b1:6a:58:61:bb:2a:46:1d:5a:c7:20:30:43:f0:c9: 6c:2b:c1:83:9c:de:f8:13:9c:34:4c:19:4f:82:15: b5:04:cc:60:5d:6d:ff:b6:ec:90:5b:0e:39:7e:75: 74:fe:25:47:c3:ba:3c:e8:92:d3:17:35:6a:3b:4d: b4:e1:5c:20:b6:79:a0:12:6b:f9:13:9e:ab:4f:84: b9:ea:ac:eb:31:cf:29:f1:d8:b8:ea:c8:1a:43:29: ed:69:68:89:fe:2c:78:ac:5e:35:5f:1e:d5:86:85: 59:4a:f3:91:52:34:bd:93:4a:1c:4e:58:65:cf:10: 3a:51:c4:40:03:ba:9c:26:a6:76:db:2b:87:c5:80: 98:48:31:d0:b7:01:f8:44:d0:15:2a:75:1a:78:18: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:59:54:9D:DA:99:6C:FA:93:AB:FD:A3:E5:66:D3:A2:DB:FC:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/595c1e08-7b05-454b-9fe5-752047a140eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.92.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:f4:6e:9b:59:27:ec:fd:95:15:25:95:96:1f:56:6f:36:7e: 50:18:3f:3f:f1:56:05:d1:cb:0c:dd:f6:4a:6b:eb:e8:48:b9: ff:96:59:75:27:ca:48:d3:c3:56:2d:9d:ea:cd:99:ba:8b:cd: 15:68:d4:8e:57:a0:07:0d:a0:7a:d7:62:3b:18:e1:5c:d9:0f: a1:49:60:66:02:b3:d1:40:82:b5:cf:86:96:72:46:42:c0:bf: da:f9:dd:32:5a:3a:b9:08:a0:d7:cf:b6:c5:c8:8f:4a:e9:96: 5e:8a:72:98:aa:c8:09:c2:2f:30:03:79:d7:05:8c:9d:01:b6: df:a4:81:12:a8:93:38:4f:3a:c4:ea:67:f6:ac:87:e2:d7:cc: 7c:cd:9d:54:3c:f3:f0:70:71:3a:31:ed:08:fc:20:b2:a0:60: e2:06:e0:62:f3:fe:87:ff:d8:40:c2:f8:ce:65:1d:9f:f9:b4: eb:6f:c5:e4:45:84:19:fb:d3:f1:52:b3:14:c9:fc:48:4e:58: fa:6e:3c:5f:ee:c8:75:42:63:a7:17:67:40:2e:05:bc:dd:af: 1d:12:97:9d:05:93:59:e3:01:a5:ff:82:fe:d6:03:33:74:ff: 91:99:cd:07:b8:68:ad:06:31:ba:9f:16:41:c0:8f:48:03:a0: 7f:b0:20:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfaOCmXnwlN1PhlQIXPz2Fr+lMaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAxMDIwWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmViZDZlMDIxODZkYzhjOTBhYmQ5ZDQwMTA3MjZkYjJj OWNjMjAwOTI5NGZlYmFkMTc3NDVjOGJlOGIxZWExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDf1WLuxjsM+37+NKu35GDoZdHTSn0huFu85yZ+PETBaWN dCWay5TawnE/gqHPPdH7ASl4XmiBeRPbBPIoHVG61IUQZpuA3bvCH9XpGg5/mPTz CIdA8EK1IgDgcnAFPwwaJDi1sBbUd7FqWGG7KkYdWscgMEPwyWwrwYOc3vgTnDRM GU+CFbUEzGBdbf+27JBbDjl+dXT+JUfDujzoktMXNWo7TbThXCC2eaASa/kTnqtP hLnqrOsxzynx2LjqyBpDKe1paIn+LHisXjVfHtWGhVlK85FSNL2TShxOWGXPEDpR xEADupwmpnbbK4fFgJhIMdC3AfhE0BUqdRp4GIkLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAj5ZVJ3amWz6k6v9o+Vm06Lb/AIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5NWMxZTA4LTdiMDUtNDU0Yi05ZmU1LTc1MjA0N2ExNDBlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPnlwwDQYJKoZIhvcNAQELBQADggEBAF70bptZJ+z9lRUllZYfVm82flAY Pz/xVgXRywzd9kpr6+hIuf+WWXUnykjTw1YtnerNmbqLzRVo1I5XoAcNoHrXYjsY 4VzZD6FJYGYCs9FAgrXPhpZyRkLAv9r53TJaOrkIoNfPtsXIj0rpll6KcpiqyAnC LzADedcFjJ0Btt+kgRKokzhPOsTqZ/ash+LXzHzNnVQ88/BwcTox7Qj8ILKgYOIG 4GLz/of/2EDC+M5lHZ/5tOtvxeRFhBn70/FSsxTJ/EhOWPpuPF/uyHVCY6cXZ0Au Bbzdrx0Sl50Fk1njAaX/gv7WAzN0/5GZzQe4aK0GMbqfFkHAj0gDoH+wICM= -----END CERTIFICATE-----Generated at Fri Sep 19 09:37:01 2025 by rpki-client